Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/798a058d-aaf4-3150-967b-6cc874c0e883.roa
File:                     798a058d-aaf4-3150-967b-6cc874c0e883.roa (raw, json)
Hash identifier:          nnXnnQVxWtVcVxz1fuKp61BkxF8MkAiVkQUxKoZcpM0=
Subject key identifier:   C1:B4:A2:D0:77:D6:B5:B0:1C:FD:E7:4D:8C:3C:7C:43:D1:F5:A3:5B
Certificate issuer:       /CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
Certificate serial:       010D0C9F43285849CA6A0DFA0879F9A110257680
Authority key identifier: D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/798a058d-aaf4-3150-967b-6cc874c0e883.roa
Signing time:             Fri 09 May 2025 01:00:47 +0000
ROA not before:           Fri 09 May 2025 01:00:47 +0000
ROA not after:            Thu 07 Aug 2025 01:00:47 +0000
asID:                     834
IP address blocks:        165.140.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:6a:0d:fa:08:79:f9:a1:10:25:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
        Validity
            Not Before: May  9 01:00:47 2025 GMT
            Not After : Aug  7 01:00:47 2025 GMT
        Subject: CN=8ad6d8c2-bfee-4e8b-8c95-8d47f5678b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bf:b6:c3:73:73:15:61:f5:4e:29:e6:4e:93:
                    b3:22:d4:12:fb:9b:4c:7b:c2:e2:53:ea:a6:a9:57:
                    f4:b2:f5:25:99:41:d0:28:55:7f:c1:0e:53:03:a1:
                    cd:44:53:af:89:fd:97:4d:e2:0d:c7:0b:cf:cb:45:
                    af:f3:fa:ae:e5:99:50:01:e4:3c:65:31:bb:1a:86:
                    64:17:99:b2:41:76:58:62:a4:b1:6c:e7:76:fe:65:
                    e6:fb:40:16:ca:68:d8:a8:47:f6:60:6c:94:1d:05:
                    6d:f2:47:d3:2f:25:9b:08:2e:21:5d:83:c0:0f:e3:
                    d5:9a:1a:1b:6c:8f:e0:b5:d3:b2:01:93:ad:e1:53:
                    6f:2e:ed:12:c2:63:1b:d9:8b:ba:e8:f3:40:bf:35:
                    50:02:5b:31:d6:03:7e:bf:fb:bb:93:db:5d:13:85:
                    2e:df:03:0c:e2:44:b7:dc:37:85:d9:ca:ef:e8:ea:
                    2f:90:39:bc:d2:0f:ce:0b:e8:03:11:ed:59:8c:b5:
                    33:ae:67:d0:88:40:39:28:aa:18:13:24:6f:ae:87:
                    c4:e6:ef:23:a5:e2:45:73:e6:d9:64:c9:af:96:76:
                    f1:14:65:2c:a1:20:54:d9:1b:71:b2:64:79:6a:5b:
                    d8:7a:68:db:c2:6c:18:29:51:d7:e3:66:0a:81:6b:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:A2:D0:77:D6:B5:B0:1C:FD:E7:4D:8C:3C:7C:43:D1:F5:A3:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/798a058d-aaf4-3150-967b-6cc874c0e883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:56:5b:aa:77:ac:14:ff:91:62:75:92:d4:a8:37:12:79:f8:
         bb:1e:01:01:aa:e0:78:83:12:1c:03:ea:25:84:f5:8d:a9:e6:
         fa:58:08:88:b3:02:f1:b5:68:b9:8e:78:a3:2d:5d:78:82:d2:
         30:26:81:dd:73:e8:6a:2c:1e:eb:4b:b5:d3:5d:00:fd:5a:69:
         a2:39:7c:c7:2a:3e:1a:06:bf:2e:af:92:9e:d8:a9:bd:26:0a:
         b4:93:d4:0a:a7:7c:ff:36:85:f3:82:ba:b5:ee:e6:c5:9c:de:
         e8:32:97:bd:bc:29:a7:d6:b2:3d:b5:12:c3:ed:eb:58:17:27:
         54:b4:da:f2:56:26:ac:61:75:9b:83:27:53:82:d2:5a:5e:07:
         85:0e:0f:e0:f0:56:39:46:5a:d9:84:4f:ea:bf:5f:81:e0:5b:
         e0:93:f9:1e:d3:fa:13:c7:45:99:b8:e1:13:bb:b4:2c:59:6b:
         5c:c5:0f:79:53:56:89:e1:96:b6:e6:d1:59:da:5e:4e:a3:f8:
         23:7e:0e:fc:a3:63:31:e0:61:fd:72:a8:2b:dc:6f:02:05:55:
         d1:c2:e8:d5:bd:51:a3:7c:1a:7f:9f:75:29:64:7e:41:3c:04:
         e3:ae:e4:97:6f:5f:08:c2:2a:52:f7:5a:33:35:6a:6c:bc:b5:
         76:b5:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:46:51 2025 by rpki-client